D2. IT System Procedures
D2.1. The MDA shall not approve program initiation or entry
into any phase that requires milestone approval (to include full-rate production)
for an acquisition program (at any level) for a mission-critical
or mission-essential IT system until the Component CIO confirms that the system
is being developed in accordance with the CCA. At a minimum, the Component CIO's
confirmation shall include a written description of the three materiel questions
of 18.104.22.168 and the considerations in Table 2, below.
D2.2. PMs shall prepare a table such as the one illustrated
at Table 2 to indicate which acquisition documents correspond to the
CCA requirements. DoD Component CIOs shall use the acquisition documents
identified in the table to assess CCA compliance. The requirements for submission
of written confirmation shall be satisfied by the DoD Component CIO's
concurrence with the PM's CCA Compliance Table. Issues related to compliance will be
resolved via the Integrated Product Team process.
D2.3. For MDAP and MAIS programs, the Component CIO's confirmation
shall be provided to both the DoD CIO and the MDA.
D2.4. DoD Components shall not award a contract for the
acquisition of a mission-critical or mission essential IT system, at any level,
until (1) the Component registers the system with the DoD CIO, (2) the DoD CIO
determines the system has an appropriate information assurance strategy, and (3)
the Component CIO confirms that the system is being developed in accordance with
the CCA by complying with paragraph
D2.5. The requirement to confirm CCA compliance applies to milestone
decisions for each increment of an evolutionary acquisition. The requirements
of the CCA apply to all IT (including NSS) acquisitions, but section
D2.4 above applies only to mission critical and mission-essential IT
D2.6. Prior to Milestone C, for MAIS, the MDA shall approve, in
coordination with DOT&E, the quantity and location of sites for a limited
deployment for IOT&E.
D2.7. When use of commercial IT is considered viable, maximum
leverage of and coordination with the DoD Enterprise Software Initiative shall